Proof complexity (11w5103)

Samuel Buss (University of California, San Diego) Stephen Cook (University of Toronto) Antonina Kolokolova (Memorial University of Newfoundland) Toni Pitassi (University of Toronto) Pavel Pudl´ak (Institute of Mathematics, Prague) October 2 – October 7, 2011

1OverviewoftheField

Proof complexity is a research area that studies the concept of complexity from the point of view of logic. In proof complexity, an important question is: “how difficult isittoproveatheorem?”Therearevariousways that one can measure the complexity of a theorem. We can ask what is the length of the shortest proof of a theorem in a given formal system (size of the proofs) or how strong a theory is needed to prove the theorem (that is, how complex are the concepts involved in the proof).Theformerisstudiedinthecontextofproof systems (in particular, propositional proof systems), the latter in bounded arithmetic. Naturally, the length of a shortest proof of a theorem very much depends on the type of proof system in which it is being proved. For a proof system, we also would liketoknowifthereisanefficientalgorithmthat would producea proof of any tautology,and whetherit would produce a shortest such proof. These questions, besides their mathematical and philosophical significance,havepracticalapplicationsinautomatedtheorem proving. From the computational point of view, the question of provingtautologiesisaco-NPquestion:thatis, acounterexampletoaformulawhichisnotatautologywouldbeshortandeasilyverifiable.Moreover, it is known that the existence of a propositional proof systeminwhichalltautologieshaveshortproofsis equivalent to proving that NP is closed under complementation. This establishes an important link between proof complexity and a major open problem in computational complexity theory. There are other connections between computational and proof complexity (for example, circuit lower bounds and proof system lower bounds), although in some cases the proof complexity counterparts of computational complexity results are still unresolved. Arelated,uniformsideofproofcomplexityisthestudyofweak systems of arithmetic (in particular, bounded arithmetic). Here the complexity of a proof of a theorem is defined in terms of the complexity of concepts involved in that proof. For example, the weaker systems of arithmetic cannot operate with concepts such as the Pigeonhole Principle. A recent subarea of proof complexity, called bounded reverse mathematics, studies the complexity of reasoning needed to prove a given theorem: that is, what is the weakest theory in which a given mathematical theorem can be proven. Proof complexity historically was developed during the 1960’s and 1970’s, as an outgrowth of research on computer-based theorem provers. At first, researchers in proof complexity concentrated primarily on lower bounds on proof size, and targeted lower bounds on computational complexity (for instance, Cook’s char- acterization of the NP=?coNP problem in terms of proof complexity) and independence results in formal

1 2

i i theories such as bounded arithmetic (the theories I∆0 and PV at first, and later fragments such as S2 and T2.) More recently, especially in the past 10-15 years, proof complexity has become increasingly concerned with problems in computer-based proof search again. This aspect was well-represented at the BIRS workshop, with talks on resolution, on SAT solvers, on linear programming, and on semi-definite programming. This renewed interest by the proof complexity community in practical computer-based theorem provers is a wel- come development. Indeed, it is hoped that significant futuredevelopmentswillarisefromthesetwostrands of proof complexity, namely from the interplay between the lower bounds on proof complexity and compu- tational complexity, and the upper bounds of improved for theorem proving.

2RecentDevelopments

Proof complexity is an active field of research. This interdisciplinary area is recognized as a respectable field both in computational complexity and in proof theory. The number of papers published, as well as the number of researchers working in proof complexity steadily increases. The present workshop documented the viability of this field. There are many directions of research in proof complexity. A large part of these directions was repre- sented in the workshop. Due to space limitations we mention only a few of them in this report.

2.1 Resolution and SAT-solvers SAT solvers, or “satisfiability solvers” represent the stateoftheartinpractical algorithms for determining the satisfiability of propositional formulas (usually givenassetsofclauses).Thesolvershavebeenquite successful (indeed, unexpectedly successful) in solving large instances of SAT that arise in applications for software verification, hardware verification, and many otherareas.Themostsuccessfulsolverstodatefor these kinds of applications are based on the DPLL (Davis-Putnam-Logemann-Loveland) search procedures that use the clause learning method of Marques-Silva and Sakallah. Resolution proof system was introduced in automated theoremproving.Thusthestudyofthissystemis motivated by practical problems. However, it is also a basic proof system in the theoretical study of proof systems. Resolution is also tightly connected with SAT-solvers. Namely, DPLL, the most commonly used tool in solving SAT is just one facet of the tree-like proofs based on Resolution. Recent advances in the study of Resolution were mostly motivated by connections with SAT-solvers. Lower bounds and trade-offs between various parameters of resolution proofs can explainwhycertainSAT-solversarenotefficientin certain situations. One set of such results was presented in the lecture of Jakob Nordstr¨om. These results are described in the section Highlights.

2.1.1 Presentation highlights The main highlight of this topic of the workshop was a talk by Jakob Nordstrom (KTH) on “Understanding the Hardness of Proving Formulas in Propositional Logic”. This was a survey talk, covering both the Resolution proof system and SAT solvers, and emphasizing the interplay between them. In particular, some new results on formula space complexity in the Resolution setting and their relation to SAT solver performance were discussed. The full description of the talk is below:

Jakob Nordstrom, Understanding the Hardness of Proving Formulas in Propositional Logic. Abstract: Proving formulas in propositional logic is believed to be theoretically intractable in general, and the importance of deciding whether this is so has been widely recognized, e.g., by this being listed as one of the famous million dollar Millennium Problems. On the practical side, however, these days SAT solvers are routinely used to solve large-scale real-world SAT instances with millions of variables. This is in contrast to that there are also known small example formulas with just hundreds of variables that cause even state-of-the-art SAT solvers to stumble. What lies behind the spectacular success of SAT solvers, and how can one determine whether a particular formula is hard or tractable? In this talk, we will discuss if proof complexity can say anything interesting about these questions. 3

In particular, we propose that the space complexity of a formula could be a good measure of its hardness. We prove that this would have drastic implications for the impossibility of simultaneously optimizing time and memory consumption, the two main resources of SAT solvers. Somewhat surprisingly, our results are obtained by relatively elementary means from combinatorialpebblegamesongraphs,studiedextensivelyin the 70s and 80s. Joint work with Eli Ben-Sasson.

2.1.2 Some other notable talks in this area1 Another problem recently studied in proof complexity concerns various modifications of DPLL that are used in SAT-solvers. In order to prove bounds on these proof systemitisnecessarytofindcorrespondingmodi- fications of Resolution. The most successful SAT-solvers useclauselearning.Advantagesandlimitsofthis method were presented in two talks devoted to the analysis of clause learning:

Jan Johannsen, Lower Bounds for Width-restricted Clause Learning Abstract: Clause learning is a technique used by propositional satisfiability solvers where some clauses obtained by an analysis of conflicts are added to the formula during backtracking. It has been observed empirically that clause learning does not significantly improve the performance of a solver when restricted to learning clauses of small width only. We survey several lowerboundtheoremssupportingthisexperience.

Sam Buss, An Improved Separation of Regular Resolution from Proof Resolution and Clause Learning. Abstract: We prove that the graph tautology principles of Alekhnovich, Johannsen, Pitassi and Urquhart have polynomial size pool resolution refutations using onlyinputlemmasaslearnedclausesandwithout degenerate resolution inferences. Consequently, these canbeshownunsatisfiablebypolynomialsizeDPLL proofs with clause learning.

2.2 Subsystems of Bounded Arithmetic In Bounded Arithmetic first order theories are studied that have close connection with complexity classes in computational complexity and proof systems in propositional logic. The research in this subarea focuses on the following problems: • finding the weakest theory in which a given theorem from computational complexity can be proven, • separating theories corresponding to complexity classes, • characterizing low complexity theorems of a given theory. There is a lot of interaction going on between bounded arithmetic and computational complexity. For in- b n stance, in recent years several characterizations of ∀Σ1 theorems of the theories T2 of the bounded arithmetic hierarchy have been found. These results introduced new classes of total polynomial search problems that were not known before.

2.2.1 Presentation highlights In a videotaped lecture Stephen Cook presented a survey of first order theories associated with complexity classes. In the second part of the lecture he talked about formalizing matching algorithms.

Stephen Cook, Formalizing Randomized Matching Algorithms Abstract: Using Jeˇr´abek’s framework for probabilistic reasoning, we formalize the correctness of two fundamental RNC2 algorithms for bipartite perfect matchingwithinthetheoryVPVforpolytimereasoning. The first is for testing if a bipartite graph has a perfect matching, and is based on the Schwartz- Zippel Lemma for polynomial identity testing applied to the Edmonds polynomial of the graph. The second algorithm, due to Mulmuley, Vazirani and Vazirani, is for finding a perfect matching, where the key ingredient of this algorithm is the Isolating Lemma. Joint work with Dai Tri Man Le. 1Due to space limitation we mention only two talks. The abstracts of other high quality talks can be found in the materials ofthe workshop. The same applies to the following sections. 4

2.2.2 Some other notable talks in this area Theories for approximate counting appeared also in another lecture. Leszek Kolodziejczyk talked about the n problem of separating these theories from theories T2 .

Leszek Kolodziejczyk, Fragments of approximate counting. Abstract: We study the low-complexity consequences of Jerabek’s theory of approximate counting, that 1 N is, T2 plus the surjective weak pigeonhole principle for P P functions, with the goal of showing that it does b not prove all the Σ1 sentences provable in full bounded arithmetic. This is inspired by the question of whether the levels of the bounded arithmetic hierarchy can be separated by a sentence of fixed low complexity, and the related question of whether the CNFs provable in constantdepthFregesystemsformahierarchywith depth. We give some partial results. Joint work with Sam Buss and Neil Thapen.

Emil Jeˇr´abek talked about a problem that apparently does not have much to do with proof complexity. But in fact the problem is highly motivated by proof complexity and has an interesting consequence for first order theories studied in bounded arithmetic.

Emil Jerˇabek,´ Root finding in TC0. Abstract: We show that for any constant d, there is a uniform TC0 algorithm computing approxima- tions of complex zeros of degree-d univariate rational polynomials (given by a list of coefficients in binary). 0 B Equivalently, the theory VTC +thesetofalltrue∀Σ0 sentences includes IOpen (for the string sort).

2.3 Proof systems for integer linear programing Another important subarea of proof complexity is the study methods used in integer linear programing by means of propositional proof systems. For example, using a machinery developed in proof complexity it has been shown that there are instances of integer linear programing that cannot be solved in subexponential time by the well-known method of cutting planes. For most methods such lower bounds are not known yet, but some partial results have been obtained.

2.3.1 Presentation highlights The most impressive lecture on this topic was given by Albert Atserias. He showed how to combine methods of finite model theory and integer linear programing to prove results about the graph isomorphism problem. Here is a more detailed description of the lecture.

Albert Atserias, Sherali-Adams Relaxations and Indistinguishability in Counting Logics. Abstract: Two graphs with adjacency matrices A and B are isomorphic if there exists a permutation matrix P for which the identity PTAP = B holds. Multiplying through by P and relaxing the permutation matrix to a doubly stochastic matrix leads to the linear programming relaxation known as fractional isomor- phism. We show that the levels of the Sherali-Adams (SA) hierarchy of linear programming relaxations ap- plied to fractional isomorphism interleave in power with thelevelsofawell-knowncolor-refinementheuristic for graph isomorphism called the Weisfeiler-Lehman algorithm, or equivalently, with the levels of indistin- guishability in a logic with counting quantifiers and a bounded number of variables. This tight connection has quite striking consequences. For example, it follows immediately from a deep result of Grohe in the context of logics with counting quantifiers, that a fixed number of levels of SA suffice to determine isomor- phism of planar and minor-free graphs. We also offer applications both in finite model theory and polyhedral combinatorics. First, we show that certain properties of graphs, such as that of having a flow-circulation of aprescribedvalue,aredefinableintheinfinitarylogicwithcounting with a bounded number of variables. Second, we exploit a lower bound construction due to Cai, F¨urer and Immerman in the context of counting logics to give simple explicit instances that show that the SArelaxationsofthevertex-coverandcutpolytopes do not reach their integer hulls for up to Ω(n) levels, where n is the number of vertices in the graph. Joint work with Elitza Maneva.

This was the other of the two videotaped lectures. 5

2.3.2 Another notable talk in this area The study of the constraint satisfaction problem is a very active area in theoretical computer science. This is because many practical problems can be represented as a particular type of the constraint satisfaction problem. Therefore it is important to understand the computational complexity of constraint satisfaction problems for natural classes. Konstantinos Georgiou studied a particular form of the problem from the point of view of the Sherali-Adams method.

Konstantinos Georgiou, Refuting CSPs require Sherali-Adams SDPs of Exponential Size, due to Pair- wise Independence. Abstract: This work considers the problem of approximating fixed predicate constraint satisfaction prob- lems (MAX k-CSP(P)). We show that if the set of assignments accepted by P contains the support of a balanced pairwise independent distribution over the domainoftheinputs,thensuchaproblemonnvariables cannot be approximated better than the trivial (random) approximation, even after augmenting the natural semidefinite relaxation with Ω(n) levels of the Sherali-Adams hierarchy. It was recently shownthatunder the Unique Game Conjecture, CSPs for predicates satisfying this condition cannot be approximated better than the trivial approximation. Our results can be viewed as an unconditional analogue of this result in a restricted computational model. Alternatively, viewing the Sherali-Adams SDP system as a proof system, our result states that a proof of exponential size is requiredinordertorefutehighlyunsatisfiableinstances. For our result we introduce a new generalization of techniques to define consistent local distributions over partial assignments to variables in the problem, which is often the crux of proving lower bounds for such hierarchies. This is joint work with Siavosh Benabbas, Avner Magen and Madhur Tulsiani.

2.4 Other topics Averyinterestinglecturewasgivenbyaleadingexpertincomputational and proof complexity Alexander Razborov. He developed a theory, which he calls flag algebras,forprovingresultsinextremalcombinatorics. His aim his to solve problems of the type of Tur´an’s Conjecture from 1941 and the Cacceta-H¨aggkvist Con- jecture. He did not prove any of these two conjectures, but made a substantial progress towards the solution. What is the most interesting aspect of his approach is that it is completely new. Here is the abstract of his talk.

Alexander Razborov (University of Chicago), Flag algebras. Abstract: A substantial part of extremal combinatorics studies relations existing between densities with which given combinatorial structures (fixed size “templates”) may appear in unknown (and presumably very large) structures of the same type. Using basic tools and concepts from algebra, analysis and measure theory, we develop a general framework that allows to treat all problems of this sort in an uniform way and reveal mathematical structure that is common for most known arguments in the area. The backbone of this structure is made by commutative algebras defined in terms of finite models of the associated first-order theory. In this talk I will give a general impression of how things workinthisframework,andwewillpaya special attention to concrete applications of our methods.

3Paneldiscussion

During the workshop we had a panel discussion on the future of proof complexity. Due to the presence of most of the leading experts in the field it was a unique opportunity to discuss such strategic problems, and the panel discussion proved to be highly stimulating. Many participants proposed research directions for the field, as well as suggested open problems (see below). The panel discussion was viewed by most participants very positively — interesting and informative. 6

4Problems

During the workshop many open problems were suggested in the talks, as well during the panel discussion. Thus, we decided to make a compendium of open problems suggested by the participants and include it here in the report.

List of problems k b 1. Separate levels of T2 [R] hierarchy: We don’t know a k such that sentences ∀Σk would separate levels. This corresponds to separating levels of bounded-depth Frege systems (a well-known problem). During the panel discussion Pavel Pudl´ak pointed out that, although the problem is hard, we probably do have means to solve it. 2. (Antonina Kolokolova, panel discussion) More connections between finite model theory and proof complexity, in the spirit of Albert Atserias and Yijia Chen’swork. 3. (Oliver Kullmann, panel discussion) Look at single instances for SAT. 4. (Sam Buss, panel discussion) Look at SMT solvers and higherordersetting:relaxconditionsatSMT setting, analyze counterexample guided abstraction refinement. 5. (Paul Beame, panel discussion) How to do an analog of clauselearningintheintegerprogramming setting (e.g., learning an equation)? What are the limitations of integer linear programming? 6. (Jan Johannsen, panel discussion) Algorithms vs proof systems question, e.g., DLL vs. tree resolution, DLL+CL vs. WRTC. 7. (Russell Impagliazzo, panel discussion) (a) Dynamic programming analysis similar to resolution. (b) Proof complexity of satisfiable instances. E.g., myopic searches. We can bound the time needed on unsatisfiable formulas, but can we do it also for satisfiable? (c) Find problem solvable in B-ODI, but not in backtracking trees. 8. (Toni Pitassi, panel discussion) Lower bounds for stronger proof systems. Also, approximation algo- rithms vs. LS, Lasserre, etc. 9. (Alasdair Urquhart) What is the complexity of determiningtheminimumregularwidthofasetof clauses? (Conjecture: PSPACE-complete). 10. ( via Alasdair Urquhart) What is the complexity of determining the resolution width of a set of clauses? (Conjecture: EXPTIME-complete). 11. (Alasdair Urquhart) Prove or disprove: The Tseitin graphtautologiesalwayshavearegularproofwith minimal size. Same question for the pigeonhole principle. 12. (Alexander Razborov) Unconditional size lower bounds for “simple” proof systems like Cutting Planes (combinatorial, without interpolation) or Lovasz-Schrijver. 13. (Albert Atserias and Alexander Razborov) Prove that the integrality gap of 2 for Vertex Cover problem survives Ω(n) rounds of Sherali-Adams without Unique Games conjecture. 14. (Toni Pitassi and Alexander Razborov) Remove restrictions in Pitassi/Patrascu’s upper bound being close to optimal. 15. (Jakob Nordstr¨omand Alexander Razborov) Is there a tautology with superlinear lower bounds on (total) variable space? This problem was listed in 2002 paperbyM.Alekhnovich,E.Ben-Sasson, A. Razborov and A. Wigderson ”Space complexity in propositional calculus”. In particular, are there polynomial-size k-CNF formulas with total refutation space Ω((sizeof)F )2 in resolution? 7

16. (Jakob Nordstr¨omand Alexander Razborov) Prove superconstant clause space lower bounds for PCR or Cutting Planes proofs for any bounded fan-in tautology. (The question for PCR also appears in ABRW’02 paper).

17. (Jakob Nordstr¨om) Is tractability captured by space complexity? That is, do theoretical trade-offs show up in real life for state-of-the-art SAT solvers run on pebbling contradictions? 18. (Jakob Nordstr¨om) Can the Substitution Theorem be proven for, say, Cutting Planes or Propositional Calculus (with or without Resolutions), thus yielding time-space trade-offs for these proof systems as well? 19. (Jakob Nordstr¨om) Are there superpolynomial trade-offs in resolution for formulas refutable in constant space? Can every proof be carried out in at most linear space? 20. (Stephen Cook) Use Emil Jerabek’s techniques to formalize constructive aspects of fundamental theo- rems that require probabilistic reasoning. This includes theorems in cryptography, such as the Goldreich- Levin Theorem, and construction of pseudo-random number generators from one-way functions. 21. (Stephen Cook) A very recent paper by Pavel Hrubes and IddoTzameretprovesthatthe‘hardmatrix identities’ (such as AB = I implies BA = I) over certain rings have quasi-polynomial size Frege proofs. The big open question here is: does this result have a uniform version? This would involve formal- izing these identities in a suitable theory such as those introduced by Stephen Cook and Lila Fontes: “Formalizing Linear Algebra”, CSL 2010. 22. (Edward Hirsch) Devise an ”interesting” heuristic proofsystem,i.e.,aheuristicproofsystemthat makes an advantage over classical proof systems for a problemthatpossessesnoknownpolynomially bounded heuristic acceptor.

1 23. (Leszek Kolodziejczyk) Can Jerabek’s theory for approximate counting, i.e. T2 (α) plus the surjective WPHP for PV2(α) functions, be separated from full S2(α) by an NP search problem?

24. (Leszek Kolodziejczyk) Is there a sequence {An : n ≥ 1} of narrow (polylog width) CNFs, with size(An)=poly(n),thatdoeshaveshortconstant-depthrefutations,butdoesnot have quasipolynomial- size treelike ”random Res(log) refutations”. More precisely, this means that there should be no quasipolynomial- size treelike Res(log) refutations of An ∧ Bn,whereBn is any narrow CNF true under at least a 1 − (1/n) fraction of all truth assignments.

5ScientificProgressMade

Participants of the workshop reported on many opportunitiesforcollaborations,somejuststartingandsome for which the resulting papers are already in preparation. Inparticular,JanJohannsenandSamBusshave obtained during the workshop new results about the provability of the obfuscated Stone tautologies in reg- WRTI and in DPLL with clause learning; a planned paper is in preparation. Albert Atserias and Moritz M¨ullerreportedthattheymadea significantprogressontheir joint work on general lower bounds for daglike Res(k) system during the workshop (in preparation). There was a discussion between Stephen Cook, Russell Impagliazzo, Valentine Kabanets and Antonina Kolokolova after Stephen Cook’s talk which is leading to an ongoing collaboration on formalizing a more general versionofSchwartz-Zippellemma.AlasdairUrquhart said he made plans to continue collaboration with Oliver Kullmann; he also reported that his conversations with Toni Pitassi about clause learning should result in a joint publication. Another collaboration project was between Sebastian M¨uller, Jan Johannsen, Moritz M¨uller and Iddo Tzameret; they have arranged follow-up research visits. Many results presented at the workshop wereworkinprogressandpapersinpreparations; participants commented on obtaining helpful feedback. Asolutiontooneoftheproblemssuggestedduringthepaneldiscussion was solved by a person who was not able to attend, Jan Kraj´ıˇcek, when student participants from the same research group recounted to him the workshop events. A note on this is written and available from Kraj´ıˇcek’s website. 8

References

[1] S. Benabbas, K. Georgiou, A. Magen, M. Tulsiani, Optimal Sherali-Adams Gaps from Pairwise Indepen- dence, APPROX (2009), 185-194 [2] S. Benabbas, K. Georgiou, A. Magen, M. Tulsiani, SDP Gaps from Pairwise Independence, (in prepara- tion) [3] S. Cook and P. Nguyen, Logical Foundations of Proof Complexity,CambridgeUniversityPress,Cam- bridge, 2010. [4] Dai Tri Man Le and S. Cook, Formalizing Randomized Matching Algorithms. LICS (2011), 185-194 [5] P. Pudl´ak, Twelve problems in proof complexity, Proc. 3rd International Computer Science Symposium in Russia, CSR (2008), pp.13-27 [6] A. Razborov, Flag algebras, Journal of Symbolic Logic, Vol. 72,No4(2007),pp1239-1282 [7] A. Urquhart, Width and Size of Regular Resolution Proofs , (in preparation). [8] Beame, P.; Beck, C., Impagliazzo, R. (2011), Time-Space Tradeoffs in Resolution: Superpolynomial Lower Bounds for Superlinear Space., Electronic Colloquium on Computational Complexity (ECCC) Vol.18 (2011), p.149 . [9] S.R. Buss, J. Hoffmann, J. Johannsen. Resolution Trees with Lemmas: Resolution Refinements that Characterize DLL-Algorithms with Clause Learning. Logical Methods in Computer Science 4 (2008), pp.4–13. [10] J. Johannsen. An exponential lower bound for width-restricted clause learning, in: Oliver Kullmann (ed.), Theory and Applications of Satisfiability Testing, 12th International Conference SAT 2009,Springer LNCS 5584 (2009), pp. 128–140 [11] E. Ben-Sasson, J. Johannsen. Lower Bounds for width-restricted clause learning on small width formu- las, in: Ofer Strichman and Stefan Szeider (eds.), Theory and Applications of Satisfiability Testing, 13th International Conference SAT 2010,SpringerLNCS6175 (2010), pp. 16–29 [12] E. A. Hirsch, D. Itsykson, I. Monakhov, A. Smal. On optimal heuristic randomized semidecision pro- cedures, with applications to proof complexity and cryptography. Theory of Computing Systems,2011(to appear), DOI 10.1007/s00224-011-9354-3. [13] E. A. Hirsch, D. Itsykson, V. Nikolaenko, A. Smal. Optimal heuristic algorithms for the image of an in- jective function. Notes of Mathematical Seminars of PDMI,(2012),toappear.Preliminaryversionappears as ECCC TR11-091. [14] E. A. Hirsch, D. Itsykson. On an optimal randomized acceptor for graph nonisomorphism. Information Processing Letters (2011), to appear. 1 [15] C. Polett, On the Finite Axiomatizability of Prenex R2, in preparation [16] S.R. Buss, L. Kolodziejczyk, N. Thapen, Fragments of approximate counting, in preparation [17] S. M¨uller and I. Tzameret, Short Propositional Refutations for Dense Random 3CNF formulas, Prelim- inary version in Electronic Colloquium on Computational Complexity (ECCC) 18:6 (2011). ∗ [18] P. Nguyen, Proving soundness for the quantified propositional calculus Gi , submitted. [19] E. Ben-Sasson, J. Nordstr¨om, Understanding Space in Proof Complexity: Separations and Trade-offs via Substitutions, Electronic Colloquium on Computational Complexity (ECCC) 17:125 (2010). [20] J. Nordstr¨om, Pebble Games, Proof Complexity, and Time-Space Trade-offs. Logical Methods in Com- puter Science (2011), to appear.